Compliance

Compliance

Compliance

CMMC for Architectural, Engineering and Construction

06/2025

5  

min read

In architecture, engineering, and construction (AEC) projects, protecting Controlled Unclassified Information (CUI) is critical for compliance and security under CMMC. Organizations must establish secure workflows to ensure CUI related to blueprints, schematics, and project documentation is properly protected, whether in digital or physical form.

Core Requirements

When managing Controlled Unclassified Information (CUI) in AEC environments, organizations must ensure they can receive, store, and share CUI securely across both digital and print workflows. These foundational requirements protect sensitive information and keep projects compliant with federal standards.

Operational Needs

It’s essential to plot and distribute blueprints or schematics securely. Since physical plans are often critical in construction, they must be printed and handled in a controlled space that remains within the secure enclave. Whenever possible, using tablets to access CUI directly at job sites helps maintain control over sensitive data, as physical documents can be harder to manage securely. Additionally, maintaining VPN connections for licensing servers tied to design software allows design tools and systems to be reached securely, ensuring the entire workflow stays protected.

Special Considerations

Organizations may need to establish secure processes for printing, storing, and transmitting documents or images containing CUI. This could include enrolling mobile devices in enterprise management solutions (e.g., Intune) to ensure secure capture and transfer of job site photos, or setting up secure workflows for digital plan distribution and collaboration.

Examples of Industry and Software and Systems

  • Autodesk: Platform for 3D design, engineering, and construction workflows.
  • Primavera P6: Project management software used in construction to plan, schedule, and track large-scale, complex projects with multiple stakeholders.
  • Home Designer Software: Residential design software for drafting construction plans, remodeling layouts, and visualizing home projects in 2D and 3D.
  • ConstructConnect: Estimating software that allows contractors to measure plans digitally, calculate material quantities, and create accurate cost estimates for bids.
  • Bluebeam: Residential design software for drafting construction plans, remodeling layouts, and visualizing projects in 2D and 3D.
  • Oracle Fusion Cloud: A cloud-based ERP for construction that streamlines project scheduling, field crew coordination, and supply chain management across job sites.

Have questions? Contact Atomus to learn how your AEC organization can address CMMC requirements and protect sensitive project information effectively.

Logo image

Become Compliant with NIST 800-171, DFARS 7012, and CMMC Requirements

Talk to an Expert